Repository navigation
OpenVMM/microVM umbrella: consoles, the management RPC, activation delivery, and stable error codes #1179
Description
Objective. Make the host's interfaces to a microVM (its consoles, the management RPC, the delivery of a clone's activation, and the errors that NVX matches) complete, safe, and stable.
Children.
| Issue | Scope | Blocked by |
|---|---|---|
| #549 | Remove the byte channel's host input; move interactive and test consoles to the boot console. | — |
| #551 | Keep guests from reaching loopback-TCP console listeners through host loopback. | — |
| #1370 | A console write error other than BrokenPipe drops the buffered portb output that a snapshot's console flush, or the device's stop, should keep. |
— |
| #996 | Let a restore attach a listener boot console to a snapshot captured with none, then let an adapter read its clones' boot consoles. |
— |
| #760 | Carry sandbox blocks, the network device, a supplied RAM file, and host filesystem policy in the management RPC. | #556, #557 |
| #544 | Deliver a platform clone's activation record before the first restored vCPU runs: in the restore packet, or in a configuration region outside captured RAM only if measurements call for one; then retire the activation RPC. | — |
| #972 | Give a port forward that cannot be bound at restore a stable error code. | — |
Order. #760 is blocked by #556 and #557. #760 asks the RPC to carry every setting that the command line accepts, and they change that set: #556 removes the runtime and custom block roles, and #557 removes the sha256 block identity with --snapshot-block-identity, whose mode #760 lists among the missing fields. Landing them first keeps the RPC from gaining fields that would then have to be removed. No other child blocks another.
Notes.
- openvmm: remove byte-channel host input; move interactive and test consoles to the boot console #549 and microVM: keep guests from reaching loopback-TCP console listeners through host loopback #551 both change how
test-microvmattaches its consoles; coordinate them. - openvmm: an excessive ReadMemory RPC size crashes the VM worker #1167 (an excessive
ReadMemory) moved to OpenVMM/microVM umbrella: OpenVMM issues outside the microVM and NVX implementation #1186: only the interactive REPL sendsReadMemory, and NVX's launches run the REPL headless. - nvx-rs: let an adapter read the boot console of a template's clones #996 follows up the snapshot/restore workstream (Snapshot/restore workstream: start sandboxes from captured templates through the shared host and guest libraries #833), and nvx-rs: replace activation RPC delivery with an uncaptured VMM configuration region #544 the image-backed runtime (Shared image-backed sandbox runtime #535); each needs an OpenVMM change before its nvx-rs part. nvx-rs: replace activation RPC delivery with an uncaptured VMM configuration region #544 would carry the record in the restore packet that the guest's time-ABI repair reads (OpenVMM/microVM umbrella: VM time and the time ABI #1183's area); a configuration region would instead change the versioned machine contract.
Metadata
Metadata
Assignees
Labels
No labels
Activity
[-]OpenVMM/microVM umbrella: consoles, the management RPC, and stable error codes[/-][+]OpenVMM/microVM umbrella: consoles, the management RPC, activation delivery, and stable error codes[/+]